> For safety, key authentication and fail2ban would cover a lot. I mainly have the 1 port.
Changing the port from the default 22 to something else is also recommended, if only because it makes fail2ban logs way less verbose.
Changing the port from the default 22 to something else is also recommended, if only because it makes fail2ban logs way less verbose.
I use a VPS with SSH. I have to ssh in, then I can ssh into the machine at home.
For safety, key authentication and fail2ban would cover a lot. I mainly have the 1 port.
If I need to expose another SSH port to the internet, I can do it, but yes, it would need extra protection since logs are coming from the machine ssh'ing in.